Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/A-5M5d56drBL1b3PFQHIT0yt9Ak.roa
File: A-5M5d56drBL1b3PFQHIT0yt9Ak.roa (raw, json)
Hash identifier: R8gkP6eIv2W62T0Co1/uMS7KC9gb/oJQpRMv8B7gp/o=
Subject key identifier: 03:EE:4C:E5:DE:7A:76:B0:4B:D5:BD:CF:15:01:C8:4F:4C:AD:F4:09
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 01A15948EE6E6EFA5EE45DD0F4C0AA696DBE
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/A-5M5d56drBL1b3PFQHIT0yt9Ak.roa
Signing time: Tue 20 Oct 2026 12:28:34 +0000
ROA not before: Tue 20 Oct 2026 12:28:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213459
IP address blocks: 80.71.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:48:ee:6e:6e:fa:5e:e4:5d:d0:f4:c0:aa:69:6d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Oct 20 12:28:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03ee4ce5de7a76b04bd5bdcf1501c84f4cadf409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c9:72:11:a5:3b:8b:c6:93:f3:c1:73:b7:63:
93:2a:59:63:9d:43:2c:50:82:26:9e:b4:1f:5f:78:
9a:5a:65:79:e1:1f:0f:bb:30:c7:f8:07:24:2d:0c:
b9:1f:25:65:37:1f:34:65:e3:3e:8d:72:5a:16:30:
fb:4c:6e:bb:d3:b9:ab:0d:74:37:97:e7:f7:6f:7e:
d1:25:f8:3f:a9:65:b1:c5:f1:3a:3b:35:64:01:66:
77:ac:92:4c:08:22:3e:c4:69:c9:35:6d:82:d8:12:
d8:dd:1c:88:8b:69:ad:aa:2e:cc:54:87:ed:80:47:
28:d3:4f:29:aa:df:eb:d9:af:41:58:dc:1e:76:fa:
31:bb:07:29:21:ad:48:62:be:3a:35:8c:89:54:96:
a8:d9:61:f8:9a:d9:3d:2b:28:43:7a:f3:4b:5d:67:
ec:1b:77:ab:1f:06:6b:2b:13:c5:66:ff:07:8e:b7:
8b:4b:7a:e0:30:a3:be:cb:7e:f0:5a:e0:6f:95:97:
f8:ff:07:91:be:ef:c3:3e:c4:0a:21:16:e1:56:fe:
ae:1f:49:8c:bb:78:3a:61:fc:54:91:0c:08:ec:1d:
79:7b:0c:cb:df:70:24:29:50:3f:7d:22:57:e5:d1:
3e:b3:62:f4:3d:08:b4:8b:4c:e9:7e:0f:be:e7:c6:
ae:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:EE:4C:E5:DE:7A:76:B0:4B:D5:BD:CF:15:01:C8:4F:4C:AD:F4:09
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/A-5M5d56drBL1b3PFQHIT0yt9Ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.236.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:b8:43:d0:46:8e:7d:43:00:91:8a:ee:08:3f:1c:01:7e:14:
02:b2:4b:df:fe:08:a8:9c:1d:94:65:c1:d9:cd:c9:34:39:d0:
4e:b8:24:75:6c:0d:3c:54:7c:40:ca:27:01:95:b6:ea:16:f5:
a2:bb:17:be:9d:e2:8e:cb:a3:08:ed:2a:ed:fb:e0:cc:d1:65:
cf:5f:f1:3b:e6:55:5d:80:12:45:21:ff:2b:12:1c:d8:27:5a:
c9:26:dc:ca:4a:f7:b3:4f:d7:dc:cd:96:8e:90:6f:45:a5:53:
c3:13:64:e6:2d:db:65:35:aa:5a:4c:5f:69:28:89:1e:ac:51:
dc:0d:5b:f1:69:7a:dc:4a:d8:15:49:d3:1a:05:1f:4d:43:c4:
0e:aa:b2:fe:24:a6:99:67:25:3d:51:37:3f:2b:ad:b8:54:69:
87:65:72:a3:13:1b:4a:00:f9:5f:78:0a:e1:7e:ba:5f:2f:f4:
79:d4:22:ec:84:ee:2f:9e:7d:5d:fd:e6:7d:8c:68:12:4b:50:
d7:48:f6:f0:43:84:86:ec:90:9b:80:ce:9f:dd:57:dc:59:ed:
9d:e3:6d:1d:c1:6a:70:bc:9e:a1:e3:a5:ba:7a:ee:08:b4:92:
81:34:b5:c7:c9:cc:a4:72:ee:80:e2:0d:22:bd:cb:60:9f:03:
58:03:5b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 17:55:49 2026 by rpki-client